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IN THE CLAIMS 

1. (Currently Amended) A network system for switching security associations 
comprising: 
a firstx network device; 

a second? network de vice, the second network device being an active network 
device: and 

a third netWOlk device, ffie th^ nftfWftrk device bei ng a standby network cfeviea ; 

a first secure communication between the first and second network devices, the 
first secure communication having a security association and a pre-defined sequence 
number limit less than a maximum sequence number; and 

a second secure communication between the first and third network devices, the 
second secure communication having the same security association as the first secure 
communication, the second secure communication .also having an initial sequence 
number greater than the pre-defined sequence number limit, 

2. (Currently Amended) The network system of claim 1 further comprising a fourth 
network device having security information corresponding to the security association, the 
fourth network device capable of passing the security information from the feat second 
network device to the third network device. 

3. (Original) The network system of claim 2 wherein the security information 
comprises at least a security parameter index. 
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4. (Original) The network system of claim 2 wherein the fourth network device 
is a redundancy handler 

5. (Original) The network system of claim 2 wherein the fourth network device 
is a router. 

6. (Currently Amended) The network system of claim 2 wherein the fourth network 
device is a media gateway controller, and the Sm second and third network devices are 
media gateways. 



7. (Currently Amended) The network system of claim 1 wherein the fest second and 
s e cond third network devices are blades. 

8* (Cancelled). 

i 

9. (Original) The network system of claim 1 wherein the second secure 
communication replaces the first secure communication when the first secure 
communication fails, 

10. (Original) The network system of claim 1 wherein replay prevention is 
enabled for both the first and second secure communications. 
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11, (Cunently Amended) A network system for switching security associations 
comprising: 
a first? network device; 

a second; network device, the second network device being an active network 
device: and 

a third network devic e, the third network device being a standby network device ; 

a first secure communication between the first and second network devices, the 
first secure communication having a security association and a pre-defined sequence 
number limit less than a maximum sequence number; 

a second secure communication between the first and third network devices, the 
second secure communication having the same security association as the first secure 
communication, the second secure communication also having an initial sequence 
number greater than the pre-defined sequence number limit; and 

a fourth network device having security information corresponding to the security 
association, the fourth networij device capable of passing the security information fiom 
the first network device to the third network device; 

wherein replay prevention is enabled for both the first and second secure 
communications. 

12. (Original) The network system of claim 11 wherein the second secure 
communication replaces the first secure communication when the first secure 
communication fails. 
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13. (Original) The network system of claim 11 wherein the first and second 
secure communications are voice calls. 

14. (Original) The network system of claim 1 1 wherein the security information 
comprises at least a security parameter index. 

15. (Currently Amended) A method for switching security associations between 
network devices, the method comprising t h e stepo of : 

establishing a first communication between a first network device and a second 
network device, the second netw ork device heing an active network device; 

negotiating a security association for the first communication; 

using a pre-defined sequence number limit less than a maximum sequence 
number for the first communication; 

replacing the first communication with a second communication between the first 
network device and a third network devic e, the third network device being a standby 
network device- 

implementing the same security association for the second communication as the 
first communication without negot iating a different security ««nri«fimi; and 

using an initial sequence number greater than the pre-defined sequence number 
limit for the second communication. 
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16. (Currently Amended) The method of claim 15 further comprising fro otop of 
passing security information corresponding to the security association from the first 
network device to the third network device. 

17. (Currently Amended) The method of claim 16 further comprising the otop of 
providing at least a security parameter index for the security information. 

18. (Currently Amended) The method of claim 16 further comprising the step of 
storing the security information in a fourth network device. 

19. (Currently Amended) The method of claim 15 further comprising tho ctcp of 
replacing the first communication with the second communication when the first 
communication fails. 

20. (Currently Amended) T^be method of claim 15 further comprising tho stop of 
enabling replay prevention for both the first and second communications. 

21. (Currently Amended) The method of claim 15 further comprising the otop of 
providing voice calls for the first and second communications. 

22. (Currently Amended) The method of claim 15 further comprising the step of 
providing blades for the seconds and third network devices. 



PAGE 10/16 1 RCVD AT 1/2712005 2:50:00 PM [Eastern Standard Time] ' SVR:USPT0€FXRF-1/2 * DNIS:8729306 • CSID:3129130002 * DURATION (mm-ss):0542 



JAN-27-05 14:55 From: MCDONNELL BOEHNEN HULBERT & BERGHOFF 3129130002 T-521 P. 11/16 Job-849 



23. (Currently Amended) A method for switching security associations between 
network devices, the method comprising th e st e pg of : 

establishing a first communication between a first network device and a second 
network devic e, the second network device being an active network device : 

negotiating a security association for the first communication; 

using a pre-defined sequence number limit less than a maximum sequence 
number for the first communication; 

replacing the first communication with a second communication between the first 
network device and a third network devic e, the third network device being a standby 
network device* 

passing security infonnation corresponding to the security association from the 
first network device to the third network device^ 

implementing the same security association for. the second communication as the 
first communication without negotiating a different security association ! 

using an initial sequence number greater than the pre-defined sequence number 
limit for the second communication. 

24 (Currently Amended) The method of claim 23 further comprising tho Qtop -&i 
providing at least a security parameter index for the security information. 

25. (Currently Amended) The method of claim 23 further comprising ths atop of 
replacing the first communication with the second communication when the first 
communication fails. 
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26. (Currently Amended) The method of claim 23 further comprising the stop of 
enabling replay prevention for both the first and second coraraunlcarions. 

27. (Currently Amended) The method of claim 23 further comprising the atop of 
staring the security information in a fourth network device. 
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